Struct Capabilities 

pub struct Capabilities {
    pub protocol: u32,
    pub verbs: Vec<String>,
    pub access: String,
    pub state: String,
    pub reason: Option<String>,
    pub sentinel_min_interval_secs: u64,
    pub sentinel_hourly_budget: u64,
    pub syncer_version: String,
    pub boot: BootStamp,
}

.flint/capabilities.json (D11). Written atomically at EVERY run startup — after claim succeeds, before the first poll — and again during first checkout, so it exists the instant the agent may start.

The startup write is load-bearing on the live-tree restart row: checkout() returns at marker_present() without materializing anything, so pinning the marker write inside checkout would upgrade a fleet whose live workspaces never get it — sentinels dead on exactly the pods the upgrade targeted.

Fields

protocol: u32

verbs: Vec<String>

access: String

"readWrite" or "read" (Access). A marker written before the field existed reads as read-write, which is what that syncer was.

state: String

Always "live". It used to read "fenced" for a syncer deposed from a life-long lease; the lease is now held per barrier (design 2026-09-13 §4), a lost commit section is retried at the next floor, and there is no terminal state left to report. Kept so the marker’s schema is stable for an agent that reads it.

reason: Option<String>

sentinel_min_interval_secs: u64

sentinel_hourly_budget: u64

syncer_version: String

boot: BootStamp

The rollback tell (D11): an agent that observes a syncer restart while this stamp is UNCHANGED is looking at a stale marker left by a downgrade — the safety catch painted green.

Trait Implementations

impl Clone for Capabilities

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capabilities

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.